ModSecurity
summary
Code ownership moves to OWASP in January and the modsecurity.org domain transfers on 8 July, the repo is reorganized into nine repositories and CI/CD pipelines are created, SonarCloud finds many trivial type issues and a new test tool generates rule cases to exercise all variables and operators, about 19 commits into V3, 55 into V2 and 21 into the Engine‑X connector are merged so far, a Windows port exists, plans include splitting V2/V3, a new release and more reviewers and testers before the library can replace the old engine.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:24Project history and ownership
- 4:06New leadership and goals
- 7:57Technical challenges and growth
- 10:24Recent achievements and plans
- 13:56Collaboration with OWASP WAF
- 16:58Call for contributors and closing
related talks
29mFlagship Projects: ModSecurity Core Rule Set
35mNever Walk Alone: Inspirations From a Growing OWASP Project
16mCode Security and Verification in the AI-Centric SDLC
39mIntroducing the ASVS 4.0
17mBuilding Secure Open Source Communities From the Ground Up
55mOWASP Coraza: The Way To WAF In 2023
44mSecurity Research with Open Source Software: Vol. Omega
41mPractical OWASP CRS In High Security Settings